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WHAT IS CLAIMED IS: 

1. A computer- implemented method for enhancing 
the security of informational interactions with a 
biometric device, comprising: 

pre-establishing an encryption relationship 
between a computing device and the 
biometric device; 

generating a session packet, encrypting it, 
and transmitting it to the biometric 
device; and 

receiving a biometric information packet, 

decrypting it, and making a 
determination, based on a content of a 
collection of information contained in 
the decrypted biometric information 
packet, as to whether or not to 
utilize a collection of biometric data 
contained in the decrypted biometric 
information packet. 

2. The method of claim 1, wherein generating a 
session packet comprises generating a session number 
and storing it in the session packet. 

3. The method of claim 2, further comprising storing 
the session number in a database associated with the 
computingdevice . 
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4. The method of claim 1, wherein generating a 
session packet comprises obtaining a session key and 
storing it in the session packet . 

5 5. The method of claim 4, further comprising storing 
the session key in a database associated with the 
computer. 

6. The method of claim 4, wherein receiving a 
10 biometric information packet and decrypting it 

comprises receiving a biometric information packet and 
decrypting it with an encryption key that is 
complimentarily related to the session key. 

15 7. The method of claim 4, wherein obtaining a session 
key comprises generating a public key portion of a PKI 
key pair. 

8. The method of claim 7, wherein receiving a 
20 biometric information packet and decrypting it 

comprises receiving a biometric information packet and 
decrypting it with a private key portion of the PKI key 
pair. 

25 9. The method of claim 1, wherein receiving a 
biometric information packet and decrypting it 
comprises receiving a biometric information packet and 
decrypting it with an encryption component that is 
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independent of the pre-established encryption 
relationship. 

10. The method of claim 1, wherein generating a 

5 session packet comprises generating a session time 
stamp and storing it in the session packet. 

11. The method of claim 1, wherein generating a 
session packet comprises : 

10 generating a session number and storing it in 

the session packet; and 
obtaining a session key and storing it in the 
session packet. 

15 12. The method of claim 11, further comprising storing 
the session number, the session key and a session time 
stamp in a database associated with the computer. 

13. The method of claim 1, wherein making a 

20 determination comprises comparing a session number to a 
list of valid values. 

14. The method of claim 1, wherein making a 
determination comprises evaluating a session time stamp 

25 to determine whether the biometric information packet 
was received within a predetermined time period. 

15. The method of claim 1 # wherein making a 
determination comprises comparing a data representation 
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of a user's biometric inf ormation to at least one data 
representation of biometric information stored in a 
database . 

5 16. The method of claim 1, wherein making a 
determination comprises: 

comparing a session number to a list of valid 
values; 

evaluating a session time stamp to determine 
10 whether the biometric information packet was 

received within a predetermined time 
period; and 

comparing a database representation of a user's 
biometric information to at least one data 
15 representation of biometric information 

stored in a database. 

17. The method of claim 1, wherein pre-establishing an 
encryption relationship comprises storing a first 

20 encryption component with the computing device and a 
second encryption component with the biometric device, 
one of the first and second encryption components being 
configured to decrypt inf ormation that has previously 
been encrypted utilizing the other of the first and 

25 second encryption components. 

18. The method of claim 17, wherein encrypting the 
session packet comprises encrypting the session packet 
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utilizing one of the first and second encryption 
components. 

19. The method of claim 1, wherein pre-establishing an 
5 encryption relationship comprises storing a first part 
of a PKI key pair with the computing device and a 
second part of the PKI key pair with the biometric 
device . 

10 20. The method of claim 19, wherein encrypting the 

session packet comprises encrypting the session packet 
utilizing one of the first and second parts of the PKI 
key pair. 

15 21. The method of claim 1, wherein pre-establishing an 
encryption relationship comprises storing a first part 
of a static encryption key pair with the computing and 
a second part of the static encryption key pair with 
the biometric device, one of the first and second parts 

20 being configured to decrypt information that has 

previously been encrypted utilizing the other part. 

22. The method of claim 21, wherein encrypting the 
session packet comprises encrypting the session packet 

25 utilizing one of the first and second parts of the 
static encryption key pair. 

23 . A data packet for transmission from a computer to 
a biometric device during a process of authentication 
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within a biometric security system, the data packet 
comprising: 

a session key, the session key being an encryption 
key configured to be utilized to encrypt 
data. 

24. The data packet of claim 23, wherein the session 
key is a public key portion of a PKI key pair. 

25. The data packet of claim 23, further comprising a 
session number. 

26. The data packet of claim 25, wherein the session 
number is a value that corresponds to a session 
initiated when the data packet is generated. 

27. A biometric device configured to support a secure 
transfer of biometric information to a computing 
device, the biometric device comprising: 

a biometric information receiver configured to 
capture an individual ' s biometric 
information; 

a processor configured to process the biometric 
information and produce a digitized 
representation thereof; 

a memory accessibly connected to the processor; 

and 

an encryption component stored in the memory, the 
processor being configured to receive an 
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encrypted session packet from the computing 
device and decrypt it utilizing the 
encryption component. 

5 28. The biometric device of claim 27, wherein the 
encryption component is implemented as firmware. 

29. The biometric device of claim 27, wherein the 
encryption component is implemented in association with 

10 a flash memory application. 

30. The biometric device of claim 27, wherein the 
encryption component is one part of a PKI key pair. 

15 31. The biometric device of claim 27, wherein the 

encryption component is one part of a static encryption 
key pair. 

32. The biometric device of claim 27, wherein the 

20 processor is further configured to place the digitized 
representation into a biometric information packet. 

33. The biometric device of claim 32, wherein the 
processor is further configured to encrypt the 

25 biometric information packet utilizing a specialized 
encryption component contained in the session packet. 
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34. The biometric device of claim of 33, wherein the 
processor is further configured to transfer the 
encrypted biometric information packet to the computer. 

5 35. A computer readable medium having instructions 
stored thereon which, when executed by a computing 
device, cause the computing device to perform a series 
of steps comprising: 

receiving a session initiation command; 
10 generating a session packet; 

encrypting the session packet; 

transmitting the encrypted session packet to a 

biometric device; 
receiving a biometric information packet from the 
15 biometric device; 

decrypting the biometric information packet; and 
determining, based on a content of a collection of 
authentication information contained in the 
decrypted biometric information packet, 
20 whether or not to utilize a collection of 

biometric data contained in the decrypted 
biometric information packet . 

36. The computer readable medium of claim 35, wherein 
25 generating a session packet comprises generating a 
session number and storing it in the session packet. 
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37. The computer readable medium of claim 36, further 
comprising the step of storing the session number in a 
database associated with the computing device. 

5 38. The computer readable medium of claim 35, wherein 
generating a session packet comprises obtaining a 
session key and storing it in the session packet. 

39. The computer readable medium of claim 38, further 
10 comprising the step of storing the session key in a 

database associated with the computer. 

40. The computer readable medium of claim 38, wherein 
receiving a biometric information packet and decrypting 

15 it comprises receiving a biometric information packet 
and decrypting it with an encryption key that is 
complimentarily related to the session key. 

41. The computer readable medium of claim 38, wherein 
20 obtaining a session key comprises generating a public 

key portion of a PKI key pair. 

42. The computer readable medium of claim 41, wherein 
receiving a biometric information packet and decrypting 

25 it comprises receiving a biometric information packet 
and decrypting it with a private key portion of the PKI 
key pair. 
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43. The computer readable medium of claim 35, wherein 
generating a session packet comprises generating a 
session time stamp and storing it in the session 
packet . 

5 

44. The computer readable medium of claim 35, wherein 
determining comprises comparing a session number to a 
list of valid values. 

10 45. The computer readable medium of claim 35, wherein 
determining comprises evaluating a session time stamp 
to determine whether the biometric information packet 
was received within a predetermined time period. 

15 46. The computer readable medium of claim 35, wherein 
encrypting the session packet comprises encryption the 
session packet with a first encryption component that 
is complimentarily related to a second encryption 
component maintained on the biometric device, one of 

20 the first and second encryption components being 

configured to decrypt information that has previously 
been encrypted utilizing the other of the first and 
second encryption components. 

25 47. The computer readable medium of claim 46, wherein 
the first and second encryption components are a PKI 
key pair. 
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48. The computer readable medium of claim 46 , wherein 
the first and second encryption components are a static 
encryption key pair. 



